Free GRC Tools

All Industries

NIST CSF 2.0 Assessment

All 106 subcategories across 6 functions with implementation tier scoring, evidence documentation, and visual dashboard.

Defense Contractors

CMMC Level 2 Gap Analysis

All 110 NIST SP 800-171 Rev 2 controls across 14 families with weighted SPRS scoring against the 88-point threshold, POA&M tracking, and evidence notes.

SaaS & Technology

SOC 2 Readiness Checklist

All 5 Trust Services Criteria with per-category maturity scoring, evidence documentation, and progress tracking.

Cloud Service Providers

FedRAMP Low Baseline Assessment

All 156 NIST SP 800-53 Rev 5 controls across 18 families with FedRAMP-specific parameters, gap analysis, and executive summary.

Healthcare Compliance

HIPAA Security Rule Assessment

All 42 implementation specifications across Administrative, Physical, and Technical Safeguards with Required vs. Addressable classification and status tracking.

Risk Management

Risk Register

5×5 likelihood-impact scoring matrix with heat map visualization, severity classification, treatment tracking, and live dashboard.

Risk Remediation

Risk Treatment Plan

Turn assessment findings into tracked remediation actions with step-by-step checklists, risk-prioritized views, and direct import from the CSF Assessment Tool.

Pairs with: NIST CSF Assessment, Risk Register

Supply Chain Risk

TPRM Assessment

42 questions across 8 domains mapped to NIST CSF 2.0, SOC 2, and ISO 27001 with real-time vendor risk scoring.

Pairs with: Risk Register, NIST CSF Assessment

Multi-Framework

Framework Crosswalk

432 controls mapped across 9 frameworks and 20 families. Search, filter, and export to CSV to see where existing work gives you cross-framework coverage.

Pairs with: Any framework assessment

Policy Templates

Policy Starter Package

5 customizable Word policies with multi-framework mappings, NIST SP 800-63B-4 aligned standards, and an Excel compliance tracker.

Pairs with: Any framework assessment

NIST CSF 2.0 Pro $329 CMMC Level 2 Pro $349 SOC 2 Pro $329 Risk Register Pro $399 FedRAMP Pro $449 TPRM Pro $379 POA&M Tracker Pro $349